Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e96dee5-a1bd-48f0-9109-a9d937fcdd9f.roa
File: 9e96dee5-a1bd-48f0-9109-a9d937fcdd9f.roa (raw, json)
Hash identifier: U1AP29Ad4NdM3HJqOJI+BJOwZNhxkaCW4xACTISL3JU=
Subject key identifier: 14:AD:79:34:B4:F9:06:30:DE:A2:FB:41:59:D8:68:16:15:95:46:81
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 179A98A757B7043D1E1EC58A3CC19F8722DE46FA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e96dee5-a1bd-48f0-9109-a9d937fcdd9f.roa
Signing time: Fri 24 Nov 2023 00:00:00 +0000
ROA not before: Fri 24 Nov 2023 00:00:00 +0000
ROA not after: Fri 29 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:9a:98:a7:57:b7:04:3d:1e:1e:c5:8a:3c:c1:9f:87:22:de:46:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 24 00:00:00 2023 GMT
Not After : Dec 29 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d4:fe:86:da:79:28:cd:da:be:a5:9a:ef:f7:
cb:1c:47:7e:90:1e:37:d5:2f:55:ed:f1:f2:48:df:
08:ac:07:39:56:d5:39:1c:21:cb:11:18:87:7a:5b:
89:16:cc:64:5b:48:9f:74:2a:02:ac:de:9e:7f:36:
5f:1d:87:54:84:92:d7:65:de:90:c1:a3:aa:cf:02:
60:c5:32:0f:a4:2d:2e:3b:cd:41:98:59:a0:b9:53:
77:c3:ee:48:0b:9e:9c:a7:d4:5c:91:d1:f4:d6:95:
fb:2c:0b:b9:2b:62:3c:7d:b1:19:15:21:c7:c7:37:
89:56:3a:a8:ee:36:da:41:c1:69:ca:eb:14:ef:ea:
c2:7c:55:7f:a0:4b:77:b0:ab:a5:c3:83:3d:18:97:
9a:e1:d1:81:91:e6:cb:87:e0:40:e9:c2:1b:53:9a:
7a:17:3b:d7:33:c2:b5:15:e4:e7:af:be:80:06:7c:
da:78:75:e8:11:d4:41:62:89:09:69:27:b6:d7:23:
5e:c5:2d:ff:f1:a9:d7:34:ca:d9:70:06:b5:33:7d:
02:bf:ef:28:3e:0c:f5:1d:8f:24:2a:76:1f:78:d2:
1f:28:48:c1:f7:c4:29:7c:d8:3a:a6:91:a6:ce:c7:
4e:e6:8a:d9:a7:5e:39:b1:e9:92:c4:24:1c:54:2d:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AD:79:34:B4:F9:06:30:DE:A2:FB:41:59:D8:68:16:15:95:46:81
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e96dee5-a1bd-48f0-9109-a9d937fcdd9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:f7:c5:e0:f2:41:32:03:32:62:83:1c:ec:21:68:55:49:db:
89:ed:e0:ad:97:ac:7b:da:b0:f2:fd:3f:25:db:44:f6:88:f2:
c7:ae:a1:21:4f:b3:c3:79:3a:4d:d2:8f:b1:45:1a:c0:79:02:
4c:d2:04:f2:d6:86:3a:1f:44:67:ca:e2:af:f5:9a:fc:c0:45:
8e:6e:df:03:5c:25:ba:dd:98:3b:d9:2a:6d:dc:25:f3:91:16:
1d:4c:28:0b:b3:c0:2c:85:09:4c:25:56:db:cf:0f:dd:83:9d:
5a:18:90:49:9c:88:44:37:a0:87:3f:b3:b2:ae:6c:9d:69:08:
05:ca:17:1c:9e:a0:94:42:c8:10:06:6a:3e:ff:43:9c:0e:63:
ed:1b:ad:ef:5d:7c:40:3a:b1:09:11:f6:0d:37:17:b5:a4:50:
1d:3a:9b:9e:32:a0:97:0f:bb:39:60:3e:8e:20:98:7e:bb:04:
36:f6:06:72:d0:59:bb:ed:d3:c0:e3:7e:dd:e1:17:b9:f7:b1:
48:93:15:79:d0:db:0b:29:c2:72:66:18:de:b5:8b:5e:d2:e0:
e3:13:73:76:5f:fe:63:06:88:e0:c7:67:85:a3:db:5c:75:22:
d9:31:dc:3a:94:d0:31:b1:1f:5d:6a:bb:94:17:3b:5d:c0:41:
3f:b5:bd:e3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUF5qYp1e3BD0eHsWKPMGfhyLeRvowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTI0MDAwMDAwWhcNMjMxMjI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MGM2YjVhMjBjYTdhNGI0YWUxZmQ2ZjFmNjI0MzM4MTNh
Mzg1NjBlZmU0NWVlNjEwODJlZTk0ZGQ5OGMxMmJhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDa1P6G2nkozdq+pZrv98scR36QHjfVL1Xt8fJI3wisBzlW
1TkcIcsRGId6W4kWzGRbSJ90KgKs3p5/Nl8dh1SEktdl3pDBo6rPAmDFMg+kLS47
zUGYWaC5U3fD7kgLnpyn1FyR0fTWlfssC7krYjx9sRkVIcfHN4lWOqjuNtpBwWnK
6xTv6sJ8VX+gS3ewq6XDgz0Yl5rh0YGR5suH4EDpwhtTmnoXO9czwrUV5OevvoAG
fNp4degR1EFiiQlpJ7bXI17FLf/xqdc0ytlwBrUzfQK/7yg+DPUdjyQqdh940h8o
SMH3xCl82DqmkabOx07mitmnXjmx6ZLEJBxULaV3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUFK15NLT5BjDeovtBWdhoFhWVRoEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzllOTZkZWU1LWExYmQtNDhmMC05MTA5LWE5ZDkzN2ZjZGQ5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHz3xeDyQTIDMmKDHOwhaFVJ24nt
4K2XrHvasPL9PyXbRPaI8seuoSFPs8N5Ok3Sj7FFGsB5AkzSBPLWhjofRGfK4q/1
mvzARY5u3wNcJbrdmDvZKm3cJfORFh1MKAuzwCyFCUwlVtvPD92DnVoYkEmciEQ3
oIc/s7KubJ1pCAXKFxyeoJRCyBAGaj7/Q5wOY+0bre9dfEA6sQkR9g03F7WkUB06
m54yoJcPuzlgPo4gmH67BDb2BnLQWbvt08Djft3hF7n3sUiTFXnQ2wspwnJmGN61
i17S4OMTc3Zf/mMGiODHZ4Wj21x1Itkx3DqU0DGxH11qu5QXO13AQT+1veM=
-----END CERTIFICATE-----
Generated at Tue Feb 18 07:02:55 2025 by rpki-client